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Abstract —This paper proposes a novel fragile watermarking 
scheme for digital image authentication which is based on 
Singular Value Decomposition(SVD) and grouped blocks. The 
watermark bits which include two types of bits are inserted 
into the least significant bit(LSB) plane of the host image 
using the adaptive chaotic map to determine the positions. The 
groped blocks break the block-wise independence and therefore 
can withstand the Vector Quantization attack(VQ attack). The 
inserting positions are related to the statistical information of 
image block data, in order to increase the security and provide 
an auxiliary way to authenticate the image data. The effectiveness 
of the proposed scheme is checked by a variety of attacks, and 
the experimental results prove that it has a remarkable tamper 
detection ability and also has a precise locating ability. 

Keywords—Image Authentication, Tamper Detection, Fragile 
Watermarking, Singular Value Decomposition 

I. Introduction 

With the tremendous development of information technol¬ 
ogy, especially in network communication and multimedia, 
digital images have a paramount role in our daily life. How¬ 
ever, the digital images can be easily modified and tampered 
with the help of powerful image processing software. In fact, 
lots of people can easily manipulate images that may bring 
about human casualty or financial loss [?]. So maintaining 
the authenticity and integrity of digital images has become a 
considerable aspect of many organizations [?], [?]. The image 
authentication schemes can fall into two types according to 
the methods they are based on: cryptography based schemes 
[?], [?] and fragile watermark based schemes [?], [?], [?]. 
Image authentication schemes based on cryptography calculate 
a message authentication code (MAC) from images using a 
hash function, and they can detect if an image has been 
modified, but they don’t have the ability to locate the modified 
regions [?]. In a scheme which is based on fragile watermark, 
the host images that need to be protected are embedded with 
the watermark which is often generated using either image 
features extracted from host image or the generated random 
values, when the image need to be authenticated, the original 
watermark is then extracted from the watermarked image to 
detect the tampered regions [?]. Walton proposed the first 
fragile watermark-based authentication schemes [?]. It only 
provides very limited tamper detection [?]. Holliman and 
Memon proved that schemes which are block-wise independent 
are vulnerable to vector quantization attack [?]. The Vector 


Quantization attackfVQ attack) means the counterfeit image 
can be reconstructed using a vector quantization code-book 
generated from a set of watermarked images, because all 
blocks in the images are authenticated, hence the counter¬ 
feit images are authentic with the watermarking scheme. To 
withstand the VQ attack, researches proposed a number of 
schemes. [?], [?] proposed the fragile watermarking schemes 
that use the chaotic pattern to generate the different image 
and then map it into a binary image eventually insert into 
the LSB bit-plane of the host image. Since the corresponding 
watermark of the modified pixel value may be consistent with 
the original watermark, result in the failure detection to the 
tampered image. In this case, localization of the tampered 
regions is incomplete, and detection of the tampering pattern 
is imprecision [?]. 

Singular value decomposition(SVD) is a kind of effective 
method of algebraic feature extraction. It can not only capture 
the basic structure of the data in the matrix, but also reflect 
the algebraic essence of the matrix. These excellent features 
make it have a wide application in signal processing, image 
compression, pattern recognition and other fields. SVD also 
has been widely used in robust watermarking field [?]. In the 
scheme proposed by Sun et.al [?], performing SVD in the 
spatial domain, and the watermark is embedded by quantizing 
the largest SV of an image block. However, this method is 
vulnerable to VQ attack. In this paper, a novel SVD-based 
watermarking scheme for image authentication is proposed. 
The blocks of the host image are disturbed with the help of 
Arnold scrambling method. Then, all scrambled image blocks 
are divided into grouped blocks. For each block, two types of 
watermark bits are embedded, one for the block itself, the other 
for the grouped blocks. An adaptive chaotic image pattern is 
generated using the logistic map for each block to determining 
the embedded position of the watermark bits. The use of the 
watermark bits of the grouped blocks is to break the block- 
wise independence and withstand the VQ attack. 


II. Singular Value Decomposition and Chaotic 
Maps 

A. Singular Value Decomposition 

In linear algebra, the SVD is a factorization of a real or 
complex matrix. Formally, any real or complex m x n matrix 



M of rank r can be decomposed as 

M = USV T 


(1) 


where U mxm and V nxn are unitary matrices, and S mxn is an 
m x n rectangular diagonal matrix. Moreover, 
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of authentication bits are hidden in the LSB of the block pixels. 
The positions used for insertion are determined by the chaotic 
sequence, which depends on the statistical information of the 
block pixels. If the statistical information is changed, all the 
watermark bits can’t be correctly extracted from the image 
block. This is an auxiliary way to authenticate the image data. 
So the use of chaotic sequence not only increases the security, 
but also increases the creditability of the proposed scheme. 


A rxr = diag(ai,<j 2 ,...,cr r ) (2) Figure CD shows the block diagram of the embedding 

procedure. The more details are described in below. 

cri = V Aj(* = 1,2, ... ,r, . ,.,n) 


The diagonal entries a, of A rxr are known as the singular 
value of the matrix M. Ai > A 2 > ... > A r > 0, A r+ i = 
X r +2 = ... = A n = 0 are the eigenvalues of both M T M and 
MM T . Under the limitation of Ai > A 2 > ... > A r , the vector 
(ai, a 2 . ■ ■ ■ ■ ay) is unique. It characterizes the distribution and 
retains the algebraic essence of the matrix data [?]. 

B. Chaotic Maps 

In recent years, chaotic system and permutation transform 
have been commonly used in digital watermarking in order 
to enhance the security [?]. Use the logistic map and Arnold 
scrambling to increase the security and performance of our 
scheme. 

1) Logistic Map: Logistic map is one of the simplest and 
most transparent systems exhibiting order to chaos transition. 
Mathematically it is defined as: 

x n+ i = px n { 1 - Xn),n £ Z,u £ [ 0 , 4 ], x n £ ( 0 , 1 ) ( 3 ) 


A. Watermark Embedding Procedure 

1) Block Division: Before generating and embedding wa¬ 
termark bits, first the original image has to be divided into 
blocks. Denote the original grayscale image as I, and its rows 
and columns are Mi and M 2 , so M(M = Mi x M 2 ) is the 
total number of image pixels. Assuming that both Mi and M2 
are the whole multiple of four, first divide the image into M/16 
non-overlapped blocks, one block is sized 4x4, and represents 
these blocks as B m ^ n {m £ [l,Mi/4],n £ [l,M2/4]) and the 
pixel values in one block as b min (i,j)( 1 < i,j < 4). 

2 ) Arnold Scrambling: This step the Arnold transform 
described in ([T) is used to scramble the original image blocks 
B m ,n■ The unit of scrambling is image block. The times of 
transformation is k, where k is the security number. Let’s 
denote the scrambled image as Seri and the blocks in the 
scrambled image as ScrB m ^ n (m £ [l,Mi/ 4 ],n £ [UM2/4]), 
and the values of pixels in a block as Scrb m n (i,j){l < i,j < 

4). 


The p here is a positive constant sometimes known as the 
“biotic potential”, when 3.5699456 < p < 4 the map is in 
the region of fully developed chaos [?]. That is, at this point, 
the sequence x/.; k = 0,1, 2,3,... generated by 0 is non¬ 
periodic, non-convergent and sensitive to the initial value. 


2 ) Arnold Transform: Arnold transform has been widely 
used in the field of image encryption. The classical Arnold 
transform is a two-dimensional invertible chaotic map de¬ 
scribed by 
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(4) 


where a and b are positive integers, N represents the size 
of the image matrix, it indicates the start point (xo,yo) 
after n iterations, then through modular arithmetic to get the 
coordinates of the final result. The Q is also chaotic and area 
preserving. The parameters a, b and the iterations k, can serve 
as secret keys to enhance the security, too. 


III. The Fragile Watermarking Scheme 

In the proposed scheme, the watermark bits to be embedded 
in the carrier image consists of two parts: block authentication 
bits for authenticating the image block itself, and group 
authentication bits for authenticating the grouped blocks. Our 
scheme is a block-based scheme. In order to withstand the VQ 
attack, the grouped blocks is used to break the independence 
between the blocks. For each one image block, these two types 


3) Set LSB to Zero: For all image blocks in ScrB rn rl , Set 
LSB bitplane of pixels as zero: 

Scrb mtn (i,i) = Scrb m , n (i,j) - ( Scrb mjn {i,j) mod 2). 
(to £ [l,Mi/4],n £ [1, M 2 /4]), (1 < i,j < 4). 

(5) 

4) SVD on The Image Blocks: Treat the image pixels in 
one block as a matrix, and perform SVD on the image blocks. 
We obtain three matrixes U, S, V as in ([T] for each one block. 
Then, the trace of the matrix S is calculated, eventually we 
map the traces to the range [0,1023] and we name the value 
as Block Authentication Number(BAN). Assuming the traces 
are Trace m ^ n (m £ [l,M 1 /4],n £ [l,M 2 /4]), i.e., 

BANmn = l(Trace m , n mod 1024)J (6) 

5) Group The Image Blocks: Grouping all the scrambled 
image blocks ScrB m n , each group have five blocks. The 
detailed procedure of Grouping is described as follows. 

Firstly, the index of scrambled image block is converted 
from two-dimensional to one-dimensional, i.e., 

ScrB k = Scrbm^n 

k = (to — 1) x Mi/A + n (7) 

(to £ [1, Mi/ 4], n £ [l,M 2 /4]),fc £ [1,M] 











Fig. 1 


of image I 

Block diagram of embedding procedure 
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(b) original image 


Then, for each block in ScrB k , we calculate the start position 
Startlndex and end position Endlndex of the group in 
which the block is: 

Startlndexk = [_((& — 1)/5)J x 5 + 1 ( 8 ) 

Endlndexk = f(fe/5)] x 5, k £ [ 1 ,M] (9) 

Thirdly, for every block, we obtain the grouped scrambled 
image blocks GSB k : 

GSBk = ScvBQ roU pj n dexes ( 10 ) 

Grouplndexes £ [Startlndexk, Endlndexk] (11) 

Finally, the index of grouped scrambled image blocks is 
converted from one-dimension to two-dimension, i.e., 

GSB M = GSB k 

p= }fc/(M 2 /4)] ,q = k mod (M 2 /4) (12) 

p S [l,Mi/4], qe [l,M 2 /4], k e [1, M] 

Figure [2] illustrates the basic concept of image blocks 
grouping method. In Figure |2j { 6 1; 6 2 , 6 3 , 64 , 65 } are grouped 
image blocks. They are neighbours in the scrambled image, 
but they are spatially unrelated in the original image. Since the 
scrambling times is not known to the attacker, hence he can’t 
obtain the grouped image blocks without the key. It improves 
the security of our scheme. 


Fig. 2 Grouped blocks in scrambled image and original 
image 


6) Calculate Group Authentication Number: According to 
the Grouped image blocks GSB p q and Block authentication 
number BAN rn rl that we have got, we can calculate the Group 
Authentication Number(GAN) for each group, that is: 

GAN Ptq = Y. BAN m , n /5 (13) 

(m,n) is in GSB p , q 

Eventually we map the GAN to the range [0,63]: 

GAN p , q = [GANp q mod 64j, (14) 

pG [l,Mi/4], q£ [l,M 2 /4] (15) 

7) Generate The Adaptive Chaotic Sequence: For one 
block in the ScrB m ^ n , compute the average value and the 
standard deviation of the pixels. Denote them as Average m ^ n 

















































































Block Authentication Number(BAN): 753 


Convert to bits 


> 10 1111 0001 


Convert to bits 

Group Authentication Number(GAN): 59 -► 111011 

Logistic Sequence: 0.66, 0.85, 0.48, 0.95, 0.19, 0.59, 0.92, 0.29, 0.78, 0.64, 0.87, 0.43, 0.93, 0.24, 0.70, 0.80 
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Fig. 3 An example of watermark bits inserting 
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and StDev m ^ n , respectively. Then: 

Initialm^n = ( Average m ^ n + 1)/257 (16) 

Parairim n = 3.5699 + ( StDev m n — \ StDev m n \) x 0.43 

(17) 

In this way we can obtain the initial value and // of logistic 
sequence described in (|3j. At last we use these above values to 
generate the logistic sequences LogSeq m ^ n , wherein the length 
of any one is 16: 

LogSeqm.,n = {xi,x 2 , ■ ■ ■, x 16 } (18) 

This mechanism ensures that the different image blocks which 
have different average value or standard deviation obtain 
different logistic sequence. 

8) Insert Watermark: First convert the BAN and GAN to 
binary bits. Since BAN are in the range [0, 1023] and GAN 
are in the range [0, 63], in that way the total length of these 
two binary bits is 16. The embedding positions depend on the 
logistic sequence, where the maximum value of the logistic 
sequence inserted with the high-order bit of BAN, and so forth. 
After inserting all bits of BAN, then the bits of GAN are 
inserted one by one depend on the relationship of the logistic 
sequence. The low-order bit of GAN insert to the position 
where the minimum value of the logistic sequence is. Figure [3] 
give an example of inserting the watermark bits in one image 
block. 

After all blocks are done watermark inserting, merge all 
4 x 4 bit planes to obtain the Authentication Bit Plane ( ABP ), 
which has the same with the original image. 


9) XOR with the Binary Watermark Image: The watermark 
image is a visually meaningful binary image and denote it 
as W. The size of W is the same with the original image 
I. Obtain the binary authentication image BAI using XOR 
operation between the binary image W and ABP as follows: 

BAI = W® ABP (19) 

10) Replace the LSB: Replace the LSB plane of Seri by 
BAI. 

11) Arnold Scrambling: Owing to the Arnold transform is 
a periodic transformation, (T — k) times of it is employed on 
Seri to obtain the watermarked image, where T is the period 
of the Arnold transform. 

B. Watermark Extracting Procedure 

Figure [4] schematically shows the watermark extract proce¬ 
dure. Most of the steps are same or similar to the corresponding 
steps of the embedding procedure, therefore these steps will 
not repeat description here. 

With the LSB plane of watermarked image, combined 
with the chaotic sequences generated by block to determining 
to positions, the original block authentication bits for each 
image block is obtained and denote it as OrigBAN m ^ n . 
The block authentication bits and the group authentication 
bits calculated from the 7 MSB plane are BAN mtn and 
GAN m:n ,(m e [l,Mi/4],n e [l,M 2 /4]), respectively. The 
procedure of matching to obtain the extracted watermark image 
and locate the modified regions of watermarked image is 
described as follows. 


























































































1) Block Authentication Bits Matching: This step is very 
simple and straightforward. If the original block authentication 
bits is not equal to the calculated block authentication bits, 
then the block is an unauthenticated block. Meanwhile the 
watermark block generated by the block is in contrast with the 
original watermark at the same position. The extracted water¬ 
mark EW rnn is a binary image and the original watermark 
OW rnn also is an binary image. 

EW = I OWm ’ n ^ BAN ^,n = OrigBAN m n 
m ’ n OW m n otherwise 

( 20 ) 

2) Group Authentication Bits Filtering: Firstly, divide all 
the blocks into groups using the method described above. Find 
the most frequent element in one group, and denote it as 

FreqGAN m ^ n . Then, 


EW = (° Wm ’ n if GANm ’ n = Fr ^GAN mtn 
m ’ n \~OW mn otherwise 

( 21 ) 

3) Locating the Modified Regions: Merge the EW mtn to 
get the complete extracted watermark binary image W ex t , next 
apply XOR operation to W ext and the original watermark 
image. Employ Block-based Arnold scrambling (T — k) times 
to obtain the image of tampered regions. 


Arnold transform are a = 1,6 = 1, and k = 30. The degree 
of distortion between the watermarked image and the original 
image is measured by PSNRfpeak signal-to-noise ratio). 

A. Copy and paste attack 

The original image which needs to be protected is a 
512 x 512 ’Sailboat’ image. Figure 5] shows the result of wa¬ 
termark embedding procedure. The PSNR of the watermarked 
image with the original image is 51.1420 dB. There are two 
kinds of copy and paste attacks. The first is adding two extra 
sailboats into the watermarked image, and the sailboats are 
directly copied from the watermarked image. The experiment 
result is shown in Figure [6] 

The second is adding an U.S. Air Force jet into the 
watermarked image, similarly, the image region of the jet 
is copied from another watermarked image. The experiment 
result is displayed in Figure [ 7 ] 


B. Text addition attack 

The Figure |8ja) is a watermarked image, and the text 
‘COUPLE’ is added at the bottom of it as Figure [8jb) shows. 
The extraction result is shown in Figure |8jc), and Figure [8j d) 
displayes the tampered region. 


IV. Simulation Experiments 

In order to assess the performance of the proposed scheme, 
in this section a variety of attacks are applied to obtain the 
simulation experiments. The watermark image in the exper¬ 
iments is a 512 x 512 binary image, and the parameters of 


C. Content removal attack 

The Figure |9|a) is a watermarked image, and the painting 
hanging on the wall had been removed from the watermarked 
image. Figure |9]b) and Figure |9]c) show the extraction result 
and the tampered region, respectively. 




















































(a) Original image 
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(b) Binary watermark image 



(c) Watermarked image 


Fig. 5 Watermark embedding experiment 



(a) Tampered image 
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(b) Extracted watermark 



(c) Detected tampered region 


Fig. 6 Watermark extracting experiment 



(a) Tampered image 
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(b) Extracted watermark 



(c) Detected tampered region 


Fig. 7 Watermark extracting experiment 









(a) Watermarked couple image 



(b) Tampered couple image 

Fig. 8 Experiment result 
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(c) Extracted watermark 


of the text addition attack 



(d) Detected tampered region 
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(a) Tampered couple image 


(b) Extracted watermark 


(c) Detected tampered region 


Fig. 9 Experiment result of the content removal attack 
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(a) Tampered couple image with VQ attack 


(b) Extracted watermark 


(c) Detected tampered region 


Fig. 10 Experiment result of the VQ attack 






D. VQ attack 

In VQ attack, a forgery is obtained by combining different 
parts of different watermarked images, while maintaining the 


shows the experiment result. The fake image, as shown in 
Figure [Iota) was obtained by copying the sailboat from Figure 
[5jc) and pasting it in Figure [8| a). 

V. Conclusion 

In this paper, A novel fragile watermarking scheme based 
on SVD and grouped blocks for image authentication is 
proposed. In order to withstand VQ attack, the watermark bits 
include two types of bits: the block authentication bits for 
authenticating the block image data and the group authenti¬ 
cation bits for authenticating the grouped block image data. 
The chaotic sequence which is adaptive for each image block 
is generated in order to increase the security and provides 
an auxiliary way to authenticate the image block data. The 
experiment results have shown that the novel scheme, has 
excellent tamper detection and precise locating capabilities, 
especially can withstand VQ attack, therefore, has a broad 
application prospects in the field of image authentication. 
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